Summary

Open Web Analytics (OWA) is open source web analytics software that can track and analyze how visitors use websites and applications. OWA is vulnerable to a reflected cross-site scripting (XSS) vulnerability due to insufficient input validation of a parameter on the login page. User-controllable input is not properly sanitized before being displayed in dynamically generated web content. Remote attackers could leverage this vulnerability to conduct reflected XSS attacks.